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Introduction 



Many problems in coding theory are related to the problem of determining the distribution 
of the number of rational points in a family of algebraic curves defined over a finite field. 
Usually, these problems are very hard and a complete answer is often out of reach. 

In the present paper we consider the problem of the weight distributions of the cosets 
of certain BCH codes. This problem turns out to be equivalent to the determination of the 
distribution of the number of points in a family of curves with a large symmetry group. 
The symmetry allows us to analyze closely the nature of these curves and in this way we 
are able to extend considerably our control over the coset weight distribution compared 
with earlier results. 

For a binary linear code C of length n the weight distributions of the cosets of C in 
F2 are important invariants of the code. They determine for example the probability of 
a decoding error when using C. However, the coset weight distribution problem is solved 
for very few types of codes. 

In [C-Z] Charpin and Zinoviev study the weight distributions of the cosets of the 
binary 3-error-correcting BCH code of length n = 2"^ — 1 with m odd. We denote this 
code by BCH (3). 

Let Fq be a finite field of cardinality q = 2"^ and let a be a generator of the multi- 
plicative group F*. The matrix 



H 




is a parity check matrix defined over Fq of BCH(2>). This means that 



SOT(3) = {c = (co,..., 



c^_i) e : He' = 0}. 
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It was shown in [C-Z] that the coset weight distribution problem for BCH{3) comes 
down to the same problem for the extended code BCH{2>) with parity check matrix 
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A coset D of BCH{3) in F2^^ is characterized by the syndrome s{D) = Hx^ G F^, where 

x is a representative of D. The weight of D is the minimum weight of the vectors in D. 
Here the weight of a vector is the number of its non-zero entries. 

Charpin and Zinoviev then show that the weight distribution problem for the cosets 
of BCH{3) of length 2"* with m odd can be solved as soon as the weight distributions of 
the cosets D4 of weight 4 with syndrome s{D4) = (0, 1, A, B) are determined. 

From [C-Z] we recall: The weight distribution of a coset D4 is determined by the 
number N[A, B) of vectors of weight 4 in D4. 

Via the matrix H this leads to the system of equations in four variables in Fq=2"» : 

Xi + X2 + X3 + X4 = 1, 

X-^ -\- X2 ~l~ 3^3 ~l~ 3^4 — (1) 
X-^ ~\~ X'2 ~\~ X^ ~\~ X4 ^ B ^ 

and N{A,B) is the number of 5'4-orbits of solutions of (1) with distinct Xi G Fg. In 
particular the number of values of N^A, B) > equals the number of different coset 
weight distributions of cosets of type D4. Note that since the set of solutions of (1) is 
invariant under translation over (1, 1, 1, 1) the quantity A'"(^, B) is even. 

In this paper we shall show that by analyzing carefully the curves defined by (1) we can 
determine good upper and lower bounds for the pivotal quantity N{A, B). The bounds are 
obtained by dissecting the Jacobian variety of the curves in our family in isogeny factors 
of dimension 1 and 2. This yields restrictions on the traces of Frobenius. The splitting of 
the Jacobian is a corollary from a very effective description of the curves defined by (1) as 
fibre products over of three elliptic curves. 

We show that for odd m the N{A, B) lie in an explicit interval of length ~ 1.57y^, cf. 
[C-Z], where the interval is ~ q/4. Moreover, we argue that on statistical grounds one may 
expect that almost all N{A, B) lie in an explicit interval of length ~ 0.9^. We then give 
numerical results that confirm strongly these heuristics and extend the table of BCH{3) 
codes with known coset weight distribution. 

§1. A family of curves 

We consider the algebraic curve C = ^ in given by the equations 

si = xo, S3 = Axl, S5 = Bxl, (2) 
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where Sj is the j-th power sum X]i=i ^1 variables xi, . . . , 0:4. Let aj denote the j-th 

elementary symmetric function in xi, . . . , 0:4. If we apply Newton's formulas for power 
sums we find 

si + xq ^ ai + xq = 0, 
S3 + Axq = {A+ 1)xq + (T2X0 + 0-3 = 0, 
S5 + Bxl = xo {{B + A)xl + (A + l)(J2xl + a^) = 0. 

This implies that the curve C consists of the three lines in the hyperplane a;o = given 

by 

+ = Xfe + = 0, with /c,/} = {1,2,3,4}, (3) 

and a curve C = Ca,b given by 

CTi = Xo, 

(73 = {A + l)xl + (72X0, (4) 
(74 = (S + A)X^ + {A+ 1)(72X^. 

The symmetric group S'4 operates on C and on C by permuting the coordinates 
xi, . . . , X4. Moreover, there is an involution r acting on C via 

(xo : xi : . . . : X4) 1-^ (xo : xi + Xo : . . . : X4 + Xo). 

This involution commutes with the elements of S4 and this gives rise to a group G of 48 
automorphisms of C. 

We introduce the invariant 

X:^B + A^ + A + 1 {eFg). 

(1.1) Lemma. 

i) If X ^ then C has six ordinary double points, namely the points of the S^-orbit of 

(0:1:1:0:0) and no other singularities, 
a) If A = the curve C consists of 12 lines. 

Proof. The Jacobian matrix of (2) is 

/I 1 1 1 1\ 

I i4 ^2 ^2 ^2 ^2 I 

I Xi X2 X3 X4 I . 

\ Bxq x^ X2 X3 X4 / 

If the rank of this matrix is < 2 for a point with coordinates (xo : . . . : X4) then there exist 
Of, (3, 7 with a, /3, 7 not all zero such that a + (3xf + -yxf = for i = 1, . . . , 4. Hence the 
coordinates Xi with i = 1, ... ,4 of a singular point of C can assume at most 2 different 
values and taking into account the equation si = xq it follows that a singular point of C 
is in the S'4-orbit of a point of the form (a : 1 : 1 : 1 : a + 1) or of the form (0 : 1 : 1 : a : a) 
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for some value of a. In the latter case we get from (4) that a = and we find 6 singular 
points in the orbit of (0 : 1 : 1 : : 0). In the former case it follows from (4) that a satisfies 

{A + l)a^ + + a = 0, and {B + A)a^ + {A + l)a^ + a + 1 = 0. (5) 

Hence a ^ and (5) is equivalent with 

{A + l)a^ + a + 1 = 0, 
{B + A)a^ + {A + l)a+ {A + 1)^0. 

The resultant of (6) equals {B + A'^ + A + 1)'^, hence (6) has a solution if and only if 
X = B + A"^ + A + 1 vanishes. In that case the Jacobian matrix has rank 2 for the solutions 
of (6). 

So if A ^ the curve C has six singular points, namely the S'4-orbit of (0 : 1 : 1 : : 0). 
For the local structure near (0 : 1 : 1 : : 0) we eliminate xq from (2) and find that the 
curve C in is given by 

S3 = Asf, S5 = Bsl. 

Upon taking affine coordinates ^1 = (xi + X2)/xi, ^2 = x^/xi, ^3 = X4/X1 we find the 
equations 

6 + ei + ei + + = ^(6 + 6 + 6)', 
6 + ^1 + + ^2' + ^1 = mi + 6 + Cs)'. 

This shows that ^1 lies in m^, with m the maximal ideal of (0, 0, 0) in and defines the 
tangent plane at (0, 0, 0) to the cubic surface 5" given by the cubic equation. Moreover, 
this is also the lowest order term of the quintic equation. Therefore, locally near the origin 
C is given by 

6 = 0, (6 + e3)(66 + iA + i)(e2 + 6)') = 0. (7) 

which shows that C has a triple point and C has a node at this point. 

If A = and a satisfies (^ + l)a^ + a+ 1 = then a is a solution of (6) and the 5'4-orbit 
of points of the form (a : x : x : 1 : a + 1) with arbitrary x is on C. So the equations 

Xi + Xj = 0, {a+l)xk+xi^O with {i, j, /c, = {1, 2, 3, 4} 

define a line on C and this gives 12 lines on C. Since C has degree 12 the curve C 
decomposes as the union of 12 lines. This proves ii). 

Remark. It follows from the preceding proof that for X ^ points on C for which 
xi, . . . ,X4^ are not all distinct lie on one of the lines (3). 

(1.2) Proposition. If X ^ then C is irreducible. 

Proof. Suppose that C = Xll^i a sum of irreducible components Ci with m > 2. Since 
C is connected at least one of the singular points is an intersection point of two distinct 
components Ci. By the S'4-symmetry then each of the six singular points is an intersection 
point of two different components. This implies that the components Ci are non-singular. 
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Since the permutation (34) interchanges the two branches of C in (0 : 1 : 1 : : 0) (cf. 
(7)) the group 5*4 acts transitively on the branches through a singular point, so ^4 acts 
transitively on the set of components. 

Let S be the smooth cubic surface in P"^ given by the equations si = xq, S3 — Axq. 
On S the curve C is linearly equivalent to AH with H the hyperplane section of S. Now the 
intersection number HCi equals the intersection number with the hyperplane xq, i.e. the 
intersection number of Ci with the three lines (3) , and since the intersection is transversal 
HCi equals the number of singular points of C on Ci. Put r = 12/m. Then by the 
symmetry we have HCi = On the other hand, the adjunction formula 

Cf + KsC, = Cf -HC, = Cf-r = 2g{Ci) - 2, 

where Ks is the canonical divisor of S, and the identity 

4r = AHCi = CCi = Cj + Y^ dCj = Cf + r 

imply cf = 3r and g{Ci) = r + 1. In particular, Ci cannot be contained in a hyperplane 
and spans P"^. Clifford's theorem applied to the hyperplane section H\Ci of Ci says that 
h^{H\Ci) < r/2 + 1, hence r > 6. Then m = 2 and we have two components. Again, 
by Clifford, these curves must be hyperelliptic and the linear system H\Ci is Sg^- But 
since Sg^ is contained in the canonical system \Kci\ this factors through the hyperelliptic 
involution, which contradicts the fact that Ci is embedded in P^ as a non-rational curve. 
This proves that C is irreducible. 

(1.3) Corollary. If X the normalization C of C is an irreducible smooth curve of 
genus 13. 

Proof On the cubic surface 5" we have (C + Ks)C = (4 — 1)HC — 36. This implies that 
for C we have 2g{C) - 2 = 36 - 12 = 24. □ 

§2. Dissecting the Jacobian 

We now analyze the curve C = Ca,b for A in more detail in order to decompose its 
Jacobian. 

Let H C Aut(C) be the subgroup generated by the two permutations (12) and (34) 
and the involution r. Then H is abelian of order 8 and isomorphic to (Z/2Z)"^. Consider 
the following diagram of degree 2 coverings of curves 







c 








/ 


i 


\ 




C/(12) 




C/(12)(34) 




C/(34) 


i 


\ 


i 


/ 


i 


c/m,T) 




C/((12), (34)) 




C/((34),r 




\ 


i 


/ 





CjH 

Let u = {x3 + X4)/{xi + 3^2) • This is a ff-invariant rational function on C, hence 
defines a rational function on C/H. 
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(2.1) Proposition. 

i) The function u gives an isomorphism C/H = P^. 
a) The curve C/((12), (34)) is a curve of genus 1 given by 

y'^ + y = Xu + X/u+{A+l). 

Hi) The curve Cj ((12), r)) is a curve of genus 2 given by 

+y = X/u^ + Xu. 

iv) The curve Cj ((34), r) is a curve of genus 2 given by 

y'^ -^y = Xu^ + x/u. 

Proof. The divisor of w on C is of the form H^/^C — H12C, where Hij is the hyperplane 
given by Xi + Xj = 0. Since both these hyperplanes contain the Hne xi + X2 = X3 + 0:4 = 
which intersects C in a divisor of degree 4 it foUows that the divisor of u can be written as a 
difference of two divisors of degree 12 — 4 = 8. Moreover, these divisors are invariant under 
the action of H. This imphes that on C / H the function u defines a non-constant function 
with a single zero and a single pole. Therefore u defines an isomorphism C/H = P^. This 
proves i). 

We now prove ii). Working with the affine equations (set xq — 1) 

(71 = 1, a3 = A+l + cr2, a^ = B + A+ {A+l)a2, 

we can write u = {xs + X4)/{xi + X2) — 1 + ^/{xi + X2), i.e. 

Xi + X2 = l/{u + 1) and X3 + X4^ = u/{u + 1). 

We put V :— X1X2 and w :— X3X4. These functions are invariant under (12) and (34), but 
not under r. Using 

(72 = X1X2 + XsX4 + (Xi + X2) {X3 + X4) =V + W + u/ {u + 1)^, 
(73 = XiX2{x2, + X4) + {Xi + X2)X^X4 = (uV + w) / {u + 1), 

the equation = A + 1 + a2 implies 

A{u + if + {u+l){v + uw) + tt^ + tt + 1 = 0, (8) 
while the equation a 4 — B -\- A + {A + l)a2 yields 

B + A + {A + l){v + w + u/{u + 1)^) + vtu = 0. (9) 
Elimination of w from (8) and (9) yields the equation 

{u + ifv'^ + u{u + l)v = Xu^ + Xu+{A + l)u +{A+ 1) V + {A + if. 



6 



Dividing by v?' and and replacing {u + l)v/u by rj (i.e. rj = xiX2/{x3 + X4)) gives 

rf + f] = Xu + X/u +{A + l)/u + {A + ifju^ + (A + \f (10) 

and this is Artin-Schreier equivalent to 

?/^ + ?/ = Am + A/m + A + I. 

Since r\ is invariant under (12) and (34), but not under r the equation (10) describes the 
degree 2 cover C/((12), (34)) of CjU. 

For iii) we remark that the function field extension of C/((12),r) over CjH is gen- 
erated by the function z — xj, ^ xiX2/{x2, + X4). Then z + z^'^^'> — X2, + x^ — u/{u -\- 1). 
Moreover, 

Z ■ 2;^^^^ = XzX4 + X1X2 + {X\X2)^ / {Xz + X^f 
= W + V + T]^ 

= A{u + 1)/^ + 1 + l/u{u +l) + r] + r]'^, 

where we used w = A{u + l)/u+l + l/u{u +v/u obtained from (8) and v + v/u = rj. 
By (10) this implies that z satisfies the equation 

2 u _ A(tt^ + u^) + (A^ + A)u^ + \{v? + -u) + Av?' + A^ + 1 
^ u + ~ u'^{u + l) 

Dividing by {u/{u + 1))^ and replacing (u + l)z/u by Q gives the equation 

+ C = A« + A/w^ + (^2 + A) + l/« + l/u" + A/u'' + A^/u^. 

Via C,^C,+A+l/u+{A+ l)/tt^ we get the Artin-Schreier equivalent form 

C^ + C = Aw + A/w^. 

Part iv) is now obtained by applying the permutation (13) (24). This changes u into 
and proves the result. 

(2.2) Theorem. The curve C is the fibre product over with afEne coordinate x of the 
three hypereUiptic curves 

y^ + y = Xx^ + X/x, 
y^ + y = X/x^ + Ax, 
y^ + y = Aa; + A/a; + ^+l. 
Proof. This follows directly from the diagram and the preceding proposition. 

Note that equivalcntly, C is the fibre product of the three curves C/. of genus 1 with 
affine equation y'^ + y — fi, where /j for z = 1, 2, 3 is given by 

/i = Xx^ + Xx + A + 1, 

f2 = X/x^ + X/x + A+l, (11) 
/3 = Xx + X/x + A + 1. 

This description allows us to dissect the Jacobian of C. 
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(2.3) Theorem. The Jacobian of Ca,b decomposes up to isogeny over Fq as a product 
of five supersingular elliptic curves, two ordinary elliptic curves and three 2-dimensional 

factors of2-rank 1. 

Proof. From the description of C = Ca,b as a fibre product we see that Jac(C) decomposes 
as a product of seven factors: three eUiptic curves Jac(C/-), two 2-dimensional factors 
Jac(C/j-|-/3), Jac(C/2+/3), and two 3-dimensional factors J8ic{Cf-^+f^) and Ja,c{Cf-^^+f^+f^). 
The 2-rank of Jac(C/.) is for z = 1,2 and 1 for z = 3. The 2-ranks of Jac(C/^_(_/3) and 
Jac(C/2+/3) are 1 since these hypereUiptic curves have two Weierstrass points. 

The curve C/^+/2+/3 is a curve of genus 3 defined by j/^ + y = A(a;^ + + A + 1 

with automorphisms 

P ■ (x, y) ^ (l/x, y), a: (x, y) ^ (a;, y + 1). 

The quotient of Cf-^^f^^f^ under p is the supersingular elliptic curve given hj y^ + y = 
X{z^ + z) + A + 1 with z = X + 1/x. Moreover, the curve Cf^j^f^j^f^ admits a non- 
constant map to the ordinary elliptic curve y^ + y = X{w + 1/w) + A + 1 via w = x^. 
So by Poincare's complete irreducibility theorem the Jacobian Jac(C/^+/2-|-/3) splits up to 
isogeny into a product of three elliptic curves and has 2-rank 1 since it has 2 ramification 
points. 

Similarly, the quotient of Cf-^^f^ by the automorphism p is the supersingular elliptic 
curve y^ + y = Xz^, while the quotient under pa is a curve of genus 2 of 2-rank 1 defined 
by the equation y'^ + y = Xz^ + l/z. Collecting these results we obtain the theorem. 

For a smooth absolutely irreducible complete curve X defined over a field Fq we shall 
denote the trace of Frobenius by t{X), i.e. t{X) = q + 1 — ^X{Fq). 

(2.4) Corollary. For q = 2'^ with m odd the trace of Frobenius of Ca,b equals 2t(C/J -|- 
2t{Cf^) + 2t{Cf^+f^) + t{Cg^), where Cg^ is the curve given by y"^ + y = g\ with g\ = 
Xx^ + 1/x. 

Proof. The curves C/^ and Cf^ are isomorphic via x ^ so have the same trace of 
Frobenius. Since for q = 2"^ with m odd the map x h- > is a bijection on Fq the curve 
Cf^^f^j^f^ given by y^ -|- y = X{x^ -|-l/a;^)-|-^+l and the ordinary factor of its Jacobian 
given by y^ -|- y = X{w + 1/w) + A + 1 have the same trace of Frobenius, and this is 
tiCf.^). Moreover, since Cf^j^f^ and Cf^j^f^ are isomorphic, we have t{Cf-^j^f.^) = t{Cf^-^f.,J. 
Similarly, the supersingular component of Jac(C/^_|_/2) given by y^ + y = Xz"^ has the same 
trace of Frobenius as the rational curve y'^ + y = Xz, i.e. 0. Therefore, the trace t{Cf^-^f^) 
equals the trace of the genus 2 quotient Cf^j^f^/ pa., and this is the curve y^ + y = g\. 

We can interpret and augment the results obtained using the involution r. The invo- 
lution T acts without fixed points on C, hence by the Hurwitz-Zeuthen formula the genus 
of the quotient curve C/r is 7. The Jacobian Jac(C) decomposes up to an isogeny 

Jac(C) - Jac(C/T) x P, 

where P is the Prym variety of C —> C/r, i.e. the identity component of the norm map 
Nm : Jac(C) Jac(C/T). Since the curves C/((12),t) = C/2+/3, C/((34),t) = C/1+/3 
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and C/((12)(34), r) = Cf^j^f^ are quotients of C/r and the fibre product C'/i+jg Xpi C/2+/3 
has genus 7 it follows readily that 

C/r ^ C'/i+/3 Xpi C'/2+/3- 
Note that the substitution x/\ yields an isomorphism Cg^^ = Cf^+f^. 
(2.5) Proposition. Up to isogeny over Fq^2^ we have the spUtting 

Jac(C/T) ~ Jac(Cg^4)^ x Jac(Cg^) x E, 

where Cg^ is as in (2.4) and E is the eUiptic curve + y = Xz^. The Prym variety P is 
isogenous to a product of six eUiptic curves: 

P ~ Jac(C/j2 X Jac(C/3)2 x P', 

where P' is a supersingular abehan surface whose trace of Frobenius t{P') over Fg satisfies 



~ \ -2{q - 1) + 2t(C/3) ifm even. 



Proof. The splitting of Jac(C/r) follows directly from the description of C/r as a fibre 
product and the splitting Jac(C/^+/2) ~ Jac(Cg^) x £^ as obtained in (2.4). Furthermore, 
using Theorem (2.3) we see that 

P ~ Jac(C/J x Jac(C/2) x Jac(C/3) x Jac(C/j-|-/2-|-/3) 

We know Jac(C/J = Jac(C/2) and that Jac(C/^_(_/2+/3) splits up to isogeny as Jac(C/3) 
and a 2-dimensional factor P' which is supersingular and up to isogeny a product of two 
elliptic curves. Using the map a; 1-^ = we see that #C/^_)_/2+/3(Fq) = ^Cf^{¥q) if m 
is odd which implies t{P') = 0, while for m even 

#C/,+/2+/3(F,) - 2 = 3(#C/3(F,) - 2). 

This implies 

t(C/,+/2+/3) - t{Cf,) = -2{q - 1) + 2t{Cf,) 
and hence t{P') = —2{q — 1) + 2t{Cf^). This proves the assertion. 

§3. Bounds for N{A, B) 

Since the curve C = Ca,b has genus 13 if X = + A + 1 + B ^ the Hasse-Weil-Serre 
bound for the number of F^-rational points jj^C a,b(F q) says 

g + 1 - 13[2V^ < #Ca,b(F,) <q + l + 13[2^. (12) 

The number N{A, B) of 5'4-orbits of solutions of (1) with distinct Xi G Fq satisfies 

N{A, B) = (#CA,B(Fq) - contribution of a; = 0, 1, oo)/24. 

It Tr(A + 1) = we have 12 rational points in the fibres above 0, 1, 00, while there are 
none if Tt{A + 1) = 1. Then (12) implies for N{A^ B) the inequalities 

(g - 11 - 13[2^)/24 < N{A, B)<{q + l + 13[2^)/24. 

By employing the decomposition of the Jacobian, especially Corollary (2.4), and taking 
into account that the possible values of the trace of Frobenius t of supersingular elliptic 
curves are t = 0, ±-\/2g for q = 2'^ with m odd we can refine these bounds and we obtain 
our main result on the numbers A'"(^, B): 
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(3.1) Theorem. For q = 2"^ with m odd the number N{A,B) satisfies the following 
inequalities: 



{q-n- 2^2q - 8[2^)/24 < N{A, S) < + 1 + 2^29 + 8[2^)/24. (13) 

In the following table we illustrate this by listing the intervals in which the numbers 
lie according to (13). 

Table 1. 
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32 


128 


512 


2048 


8192 


interval 


[0,4] 


[0, 14] 


[4,38] 


[50, 120] 


[270, 412] 



For some further reflections on A'"(^, B) we restrict to the case q = 2^ with m odd. 

The practice of searching for curves with many points tells us that is is highly improbable 
that in a fibre product of curves the traces of Frobenius of the individual components 
simultaneously reach their maximal (or minimal) value. Hence it is very unlikely that the 
bounds given in (13) will be reached. 

We intend to design an interval which contains almost all values of Ar(^, S) using the 
description of C as a fibre product of the curves Cj- for i = 1,2,3 given in (11) and a 
probabilistic argument on the distribution of traces of Frobenius. 

The curves C/^ and Cf^ are supersingular elliptic curves with the same trace of Frobe- 
nius t = t{Cf^) = 0, ±\/2^- The curve Cf^j^f^ has genus 3 which implies 

-3[2Vg]<t(C^,+/J<3[2Vg]. 

So the trace of Frobenius for the normalization of the fibre product C/^ Xpi Cf^ satisfies 

-3[2y^] - 2^2^ < t < 3[2^ + 2^/2^. 



We compute bounds for the number of a: G P^ — {0,l,oo} above which we have 4 points in 
the fibre of C/^ Xpi Cf^ If Tr{A + 1) = we find in total 8 points above x = 0, 1, oo, while 
we find none if Tr(A-|- 1) = 1. Subsequently we take into account that completely splitting 
X — {0, 1, oo} occur in pairs {x, 1/x) and we obtain the following Proposition. 

(3.2) Proposition. If we let 

M(/i,/2) = ^^{x e F\Fg) - {0, 1,00} : X splits completely in Cf, Xpi C/J 



then we have for Tr{A + 1) — 

g-7-3[2Vg]-2^ 
8 

and for Tr(A + 1) = 1 

g + l-3[2^]-2V2^ 
8 



<M{hj2) < 



<M{hJ2)< 



q-1 + Z[2^] + 2^ 



g + l + 3[2^] +2^/2^ 
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We now consider the effect of the eUiptic curve C/3 in the fibre product. The j- 
invariant of C/3 is G F*. This imphes that t{Cf.^) is odd. For Ty{A + 1) = we 
have t{Cf^) = l(mod4) and there are 4 rational points together above x = 0, 1, 00, while 
if Tr(A + 1) = 1 we have t{Cf^) = 3 (mod 4) and 2 rational points above 0, 1, cxd. Further- 
more, each element of F* occurs exactly once as j-invariant in the family of curves C/3. 
That implies that t{Cf^) assumes each odd integer value in the interval [— [2y^], [2^/^]]. 
So the number of completely splitting pairs assumes each integral value in the intervals 
mentioned in the following Proposition. 

(3.3) Proposition. If we let 

M{fs) = ^#{a; e P^(Fg) - {0, 1, 00} : a; splits completely in C/3} 
then M{f'i) assumes all integer values in the intervals 

^lzl^,^zl±m] if iv(^+i)=o, 



Finally, we combine the two preceding propositions via a heuristic argument. Let 

M(/i,/2,/3) = 

eP^(Fg) — {0, 1, 00} : X splits completely on C/^ Xpi Cf^ Xpi C/3} 

Since there are (g — 2)/2 pairs (x, 1/x) (a; 7^ 0, 1, 00) we expect 

,g-3- [2^],,g-7-3[2^] -2V2g, , . . . 

_L^)(^'i L^^^ v^)/(5_2) < M(/i,/2,/3) < 

^^ g-l+[2^] ^ ^g + l + 3[V^^hV2?^^^^ _ 
4 8 

If we work this out and neglect terms of order 1 / y/g and lower we find 

g-4[2Vg] -272^ + 4 + 4^2 ^ ^^^^ , , ^ g + 4[2^] + 2v/2^ + 14 + 4^2 
^ < M (/i, /2, 73) < ^ (14) 

Each completely splitting pair yields 16 solutions of (1) so to estimate the number of 6*4- 
orbits of solutions N{A, B) we multiply the interval by 16/24 to get an interval /. Since 
N{A, B) is even we adapt the endpoints of the interval / just obtained slightly. Namely 
we consider the smallest interval with endpoints the positive even integers which contains 
/ and we denote this interval by I^^^^. 
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(3.4) Heuristics. The odds are that the values of N{A, B) are in the interval 

.even _ . g - 4[2 ^g] ^ 2^ + 4 ^2 + 4 g + 4[2^]+2V2^ + 4V2+14 
^ 24 ' 24 J 

We illustrate this by a little table. 
Table 2. 



Q 


32 


128 


512 


2048 


8192 


interval 


[0,6] 


[0,12] 


[10,34] 


[64, 108] 


[300, 384] 



§4. Numerical results 

In order to obtain numerical results on N{A, B) to test our heuristics the first remark is 
that A'"(^i, B) = N(A2, B) if Tr(Ai) = Tr(A2). So we have to distinguish only between 
Tr(A) = and Tr(A) = 1. We shall compute the trace of Frobenius for the seven factors of 
our Jacobian. We shall write /4 = /i + /a, /s = /i + /s, /g = /2 + /s and /? = /i + /2 + /s- 
The Jacobians of the curves C/. given hy + y — fi for i = 1, . . . ,7 constitute the seven 
factors of Jac(Cyi,B)- We write 

rif, = #{x e F* : T,{U{x)) = 0}. 

(4.1) Proposition. The number of solutions N{A,B) with m odd of the 

system (1 ) with X — A'^ + A + l + By^Ois given by 

N{A, B) = 2g - 2 - 2{n,, + n,, + n, - - n,, - n,, + ^^^^ ^ 

and 

iV(A, B) = -6g-2 + 2ELn,. ^^^^ ^ ^ 

Proof. As just explained wc may take A = or A = 1. Then A = S + 1 7^ and we 
set fi = {B + l){x^ + x), f2 = (B + l){l/x^ + 1/x) and fs = {B + l){x + 1/x). Then 
Ci^B — Cf^ Xpi C/2 Xpi C/3 and Co,b = C'/i+i Xpi C'/2+i ^fz+i- in Theorem (2.3) 
the curves C/. for z = 4, . . . , 7 give the remaining traces of Frobenius. 
The trace of Frobenius t(C/.) is of the form 

KCfi) = g + 1 - 2n/. - Oi, 

where Oj is the contribution of x = 0, 00, while the trace of Frobenius of Cf^+l is 

t{Cf,) = -q + S + 2nf,-bi, 
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where 6j is the contribution of a; = 0,oo. By analyzing these contributions from and oo 
one gets the Proposition. 

We now give tables with the distribution of the numbers N{A, B) for g = 2"^ with m 
odd and 5 < m < 13. These tables are obtained by computing the numbers n/. and they 
solve the coset weight distribution problem for the corresponding BCH{3) codes. The first 
unknown case up to now was g = 2^, see [C-Z]. Moreover, the tables confirm our heuristics. 
We list the frequencies divided by q/2. 

Table 3. 

q = 2^ 



N{A,B) 





2 


frequency 


27 


35 



g = 2^ 



N{A,B) 





2 


4 


6 


8 


10 


frequency 


2 


28 


98 


84 


35 


7 



g = 29 



N{A,B) 


12 


14 


16 


18 


20 


22 


24 


26 


28 


30 


32 


frequency 


18 


21 


117 


180 


148 


195 


199 


81 


36 


18 


9 



g = 2ii 



N{A,B) 


66 


68 


70 


72 


74 


76 


78 


80 


82 


84 


86 


frequency 


22 


66 


88 


55 


176 


264 


187 


374 


374 


374 


451 


N{A,B) 


88 


90 


92 


94 


96 


98 


100 


102 


104 


106 


108 


frequency 


365 


341 


275 


341 


154 


44 


55 


33 


11 


22 


22 



g = 2i3 

In this case we encounter a new phenomenon. The function N{A, B) assumes even 
values in the interval [290,390], but not all even values are taken. This contradicts the 
expectation of [C-Z] that the values form a sequence of even integers without gaps. The 
frequency divided by q/2 of the value 290 + 21 with < £ < 50 is given by 

(I if£ = ll, 
137^+ <^ 1 if £ = 37, 
1 else. 
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where 7 = (70, . . . , 750) is the vector 



7 = (1, 0, 1,0, 1, 0, 6, 3, 5, 5, 12, 7, 19, 15, 22, 25, 37, 40, 43, 37, 35, 60, 54, 72, 72, 58, 65, 
61, 57, 57, 63, 48, 35, 44, 34, 34, 25, 29, 25, 15, 9, 7, 2, 3, 7, 3, 3, 1, 0, 1, 2). 

In accordance with our heuristics less than 1 % of the N{A,B) lie outside the interval 
[300,384]. 

§5. The covering radius 

A problem in coding theory that precedes the coset weight distribution problem is the 
determination of the covering radius. It is defined for a binary linear code C of length n 
as the smallest integer p such that the spheres of radius p around the codewords cover . 
Equivalently, it is the maximum weight of a coset leader (by which we mean a vector of 
minimum weight in a coset of C in F2). It is an interesting parameter of a code since it 
provides information on the performance of the code when used in data compression. 

In a series of papers [H-B] , [A-M] and [H], of which [H-B] and [H] treat the case m 
even and [A-M] the case m odd, it was proved that the BCH{2>) code of length n = 2"^ — 1 
has covering radius 

p{BCH{3)) = 5 for m > 4. 

The proofs for the various cases are very different. Using algebraic geometry we can give 
a unified proof. 

In order to prove that p{BCH{3)) — 5 we have to show that for every {A, B, C) e F^ 
the system of equations: 







= A 




.. + xl 




xl + . 


.. + 4 





has a solution (xi, 0:5) G F^ for any (A, S, C) G F^. By replacing Xi hj Xi-\- A we may 
assume without loss of generality that ^ = and (5, C) ^ (0, 0). If we then homogenize 
(15) the system 

55 5 
^x, = 0, Y.4-Bxl Y.4-Cxl (16) 

defines a projective variety V of dimension 2 in the five dimensional projective space P^. 

We intersect V with the hyperplane xq + x^ = and obtain a system of equations of 
the form (2). By using the results of Section 1 (especially Corollary (1.3)) one can easily 
show that p{BCH{3)) = 5 for m > 10. We leave the details to the reader. 

As a final remark we would like to point out that we think that many more problems 
on cyclic codes can be attacked succesfuUy using methods from algebraic geometry as is 
done in this paper. We refer to [C] for a list of such problems. 
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